File Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated privileged user to execute arbitrary code and obtain sensitive information via the ClientUploader function.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34193.json"
}{
"extracted_events": [
{
"introduced": "0"
},
{
"last_affected": "8.8.15-NA"
},
{
"last_affected": "8.8.15-p1"
},
{
"last_affected": "8.8.15-p11"
},
{
"last_affected": "8.8.15-p20"
},
{
"last_affected": "8.8.15-p26"
},
{
"last_affected": "8.8.15-p3"
},
{
"last_affected": "8.8.15-p30"
},
{
"last_affected": "8.8.15-p31"
},
{
"last_affected": "8.8.15-p32"
},
{
"last_affected": "8.8.15-p33"
},
{
"last_affected": "8.8.15-p34"
},
{
"last_affected": "8.8.15-p35"
},
{
"last_affected": "8.8.15-p5"
}
],
"cpe": [
"cpe:2.3:a:zimbra:collaboration:8.8.15:-:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p1:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p11:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p20:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p26:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p3:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p30:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p31:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p32:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p33:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p34:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p35:*:*:*:*:*:*",
"cpe:2.3:a:zimbra:collaboration:8.8.15:p5:*:*:*:*:*:*"
],
"source": "CPE_FIELD"
}